smb

SMB Um pacote Go para comunicação via SMB. Atualmente, apenas funcionalidade mínima existe para funções do lado do cliente. root@kitploit: package main import "log" "github.com/stacktitan/smb/smb" func main host := "172.16.248.192" options := smb.Options Host: host, Port: 445, User: "alice",...

CVE-2026-26456

A null pointer dereference vulnerability exists in the server-side session management logic of ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5. The issue is caused by a race condition between the request dispatch thread and the session cleanup thread when accessing shared session list nodes withou...

Exploit-For-CVE-2026-18963

CVE-2026-18963 — Assunção de Conta Não Autenticada no Keycloak CVSS 9.1 Crítico · Keycloak 26.0.0 – 26.7.1 · Não Autenticado Uma vulnerabilidade crítica no fluxo de redefinição de credenciais do Keycloak que permite a um atacante não autenticado assumir qualquer conta de usuário sem verificação d...

CVE-2024-44000-LiteSpeed-Cache

CVE-2024-44000-LiteSpeed-Cache CVE-2024-44000 é uma vulnerabilidade no plugin LiteSpeed Cache, um plugin popular do WordPress. Esta vulnerabilidade afeta o gerenciamento de sessão no LiteSpeed Cache, permitindo que invasores obtenham acesso não autorizado a dados sensíveis. Pré-visualização Como...

CVE-2025-24813-PoC-Apache-Tomcat-RCE

Apache Tomcat CVE-2025-24813 إثبات المفهوم PoC استغلال لإثبات المفهوم لثغرة إلغاء التسلسل في Apache Tomcat CVE-2025-24813. توضح هذه الأداة كيف يمكن للمهاجمين استغلال إلغاء التسلسل غير الآمن في إدارة جلسات Tomcat. تحذير : هذه الأداة مخصصة لاختبار الاختراق المصرح به والأغراض التعليمية فقط. الاستخدا...

POS Codekop v2.0 - Broken Authentication

A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated attackers to download selling data. id: CVE-2023-36347 info: name: POS Codekop v2.0 - Broken Authentication author: princechaddha severity: high description: | A broken authentication mechanism ...

Tenda AC1200 V-W15Ev2 - Authentication Bypass

The Tenda AC1200 V-W15Ev2 router is affected by improper authorization/improper session management. The software does not perform or incorrectly perform an authorization check when a user attempts to access a resource or perform an action. This allows the router's login page to be bypassed. The...

CVE-2024-44000-LiteSpeed-Cache

Poc LiteSpeed Cache CVE-2024-44000 Exploit CVE-2024-44000 ist eine Sicherheitslücke im LiteSpeed Cache Plugin, einem beliebten WordPress-Plugin. Diese Sicherheitslücke betrifft die Sitzungsverwaltung in LiteSpeed Cache, was es Angreifern ermöglicht, unbefugten Zugriff auf sensible Daten zu...

CVE-2025-54309__Enhanced_exploit

CVE-2025-54309उन्नतएक्सप्लॉइट यह watchtowrlabs द्वारा मूल रूप से बनाए गए एक्सप्लॉइट POC का उन्नत संस्करण है: https://github.com/watchtowrlabs/watchTowr-vs-CrushFTP-Authentication-Bypass-CVE-2025-54308 उन्हें बहुत-बहुत धन्यवाद!! यह एक्सप्लॉइट केवल शोध और शैक्षिक उद्देश्यों के लिए है और उल्लिखित...

CVE-2026-26456

CVE-2026-26456 affects ccoap , a CoAP library, at commit 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5. The vulnerability is a null pointer dereference in the server-side session management logic. The root cause is a race condition between the request dispatch thread and the session cleanup thread whe...

EUVD-2026-67097

A null pointer dereference vulnerability exists in the server-side session management logic of ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5. The issue is caused by a race condition between the request dispatch thread and the session cleanup thread when accessing shared session list nodes withou...

openclaw-dashboard

Dashboard degli Agenti OpenClaw Una dashboard di monitoraggio bella, sicura e in tempo reale per gli agenti OpenClaw. Tieni traccia delle sessioni, monitora l'uso delle API, visualizza i costi, gestisci i file di memoria e controlla lo stato del sistema — tutto in un unico posto. 📸 Screenshots...

crackerjack

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...

crackerjack

!CAUTION Dieses Repository ist nicht mehr gewartet, besuchen Sie https://github.com/sadreck/crackerjack für die neueste Version. CrackerJack Web-Oberfläche für Hashcat von Context Information Security Inhaltsverzeichnis Einführung Architektur Funktionen Einschränkungen Installation Fehlerbehebung...

penelope

Penelope è un moderno gestore di shell per penetration tester e giocatori di CTF. Offre un'alternativa più potente ai semplici listener netcat, aggiungendo aggiornamenti automatici PTY, gestione delle sessioni, logging, trasferimento di file e moduli helper. Sommario 📥 Installazione ⚙️ Funzionalit...

EUVD-2026-65612

NVIDIA UFM Enterprise contains a vulnerability in the session management component, where an attacker could use a hard-coded cryptographic key to extract information. A successful exploit of this vulnerability might lead to information disclosure and escalation of privileges...

CVE-2026-24166

NVIDIA UFM Enterprise has a vulnerability in its session management component caused by a hard-coded cryptographic key . An attacker with local access could exploit this to extract information, potentially leading to information disclosure and escalation of privileges . The CVSS 3.1 score is 5.1 ...

TYPO3-EXT-SA-2026-015: Insufficient Session Expiration in extension "SYSSY - TYPO3 Monitoring & Security Checks" (syssy)

More info at https://news.typo3.com/security/advisory/typo3-ext-sa-2026-015...

EUVD-2026-63221

An unauthenticated remote attacker in possession of a valid session identifier is able to continue using the session after it should have expired. This increases the risk associated with stolen, leaked, shared, or unattended sessions and may enable unauthorized continued access to the FDS web...

EUVD-2026-62454

phpMyFAQ before 4.1.7 contains a brute-force vulnerability in the two-factor authentication step where the failure counter is session-scoped and reset on each successful password re-authentication. Attackers with a valid password can bypass the five-attempt limit by obtaining a fresh session cook...